Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          JtCh3VcsaK6LWZdy4v4gHDonNxnv9jCtkmwgxJUCKro=
Subject key identifier:   88:9F:6F:90:A7:BF:DE:F3:89:11:3A:7F:D6:F7:3E:F5:A3:D8:4A:BF
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       01988B0EAE03042588D3F702BF5A9ED8462C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1634
Signing time:             Fri 08 Aug 2025 19:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:51 +0000
Files and hashes:         1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=)
                          2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=)
                          3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=)
                          4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=)
                          5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=)
                          6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=)
                          7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: l+QYj7e5Puo6+Jbr+exJb8Rmbzr6dHyHeXHd8MrHwbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:ae:03:04:25:88:d3:f7:02:bf:5a:9e:d8:46:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Aug  8 19:00:51 2025 GMT
            Not After : Aug  9 19:00:51 2025 GMT
        Subject: CN=889f6f90a7bfdef389113a7fd6f73ef5a3d84abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:4d:ae:10:9a:d5:bd:b8:9f:91:83:98:2a:
                    38:a1:98:15:06:90:da:12:97:cc:68:ab:cb:a5:5f:
                    97:54:15:52:9b:51:06:3e:bb:db:06:7b:1d:00:90:
                    79:85:d4:6b:7f:08:c1:47:fe:1b:9d:68:bb:0e:6c:
                    15:0e:45:b1:51:14:b0:33:20:2a:09:09:b7:b2:ed:
                    47:51:2f:24:e4:71:5e:c5:53:b8:ff:48:62:b2:79:
                    4f:06:85:74:63:ca:60:3c:d7:f9:6a:d5:79:fe:bc:
                    8b:43:1e:f5:94:f5:0d:62:3d:e3:8b:b3:20:78:f2:
                    e9:4c:93:d0:2f:4d:8f:25:37:45:02:b9:59:f8:5e:
                    27:e6:20:d1:4e:ca:8b:5e:5e:01:12:85:40:b6:bc:
                    2c:ea:a6:7e:58:14:44:07:ad:fb:44:6b:78:5a:51:
                    4a:f2:13:de:38:9c:a2:4f:35:e8:2a:54:62:2a:da:
                    8c:be:87:19:16:22:64:b4:9a:fa:c6:fd:ae:fa:31:
                    47:2e:a0:e8:88:9a:0d:e8:a8:b3:4f:89:94:2e:59:
                    0f:a3:52:24:a1:da:dd:52:e5:23:d6:5e:a4:32:41:
                    37:4e:bc:b1:1a:91:db:f9:70:71:f8:70:32:e8:09:
                    ff:f4:7d:73:a6:e1:d2:46:5f:8f:c5:bf:a9:a7:0f:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:6F:90:A7:BF:DE:F3:89:11:3A:7F:D6:F7:3E:F5:A3:D8:4A:BF
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:4b:11:43:22:8f:46:6f:b5:d7:62:f4:ce:df:f1:32:61:
         5a:c2:15:82:ac:ee:f1:26:94:e7:d1:c0:94:79:b8:5e:79:c8:
         8f:89:b9:6d:04:78:82:14:f7:37:4c:47:a2:82:19:15:7b:f3:
         98:02:74:a4:2a:b0:21:d3:f9:9b:2a:d6:d5:a8:d1:1f:1b:67:
         fe:a0:80:d7:1c:06:e8:bb:bd:27:7e:89:a1:e9:e2:c2:5b:4c:
         08:9c:88:87:98:72:12:f4:09:22:12:8b:c9:e7:47:30:c2:5d:
         00:9f:7e:e1:ce:7e:95:bb:bc:d7:65:f1:de:43:c1:b1:38:c7:
         f6:c7:44:c2:f9:f2:01:9c:b4:d1:fb:42:21:25:f2:86:1b:fe:
         c5:ce:22:dd:8e:b0:f1:4a:c0:3d:09:2c:ab:8f:d0:56:5b:49:
         1b:63:99:0d:74:a3:90:2a:7a:40:e0:6f:ef:1f:4a:52:90:1e:
         f0:3d:37:60:da:b3:eb:ce:86:d4:3a:ed:4c:aa:63:a1:f9:d5:
         e9:2a:fa:19:aa:6b:90:72:fd:a1:15:49:38:25:15:82:f0:99:
         e5:33:c7:98:82:58:ff:a0:bb:83:27:6f:2e:09:93:cc:2a:3b:
         53:42:d4:a9:9b:be:43:3d:ff:27:46:04:a0:40:e7:d7:c4:20:
         50:1c:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:21 2025 by rpki-client